Generate the Certificate Signing Request

About this task

Use this procedure to generate a certificate signing request (CSR) and store it into a file. This CSR is required to obtain the offline subject certificate. The generated file is located in the /intflash/shared/certs folder.

Procedure

Enter Global Configuration mode:

enable

configure terminal
Generate certificate signing request:

certificate generate-csr [relaxed]
Optional: Configure the subject-name and the key name:

certificate generate-csr subject-name WORD<1-45> key-name WORD<1-45>

Example

Display the generated CSR.

Switch:1>enable
Switch:1#configure terminal
Switch:1(config)#certificate generate-crs subject-name 823 key-name pki
Switch:1(config)#1 2021-02-02T13:57:39.716z Switch CP1 - 0x003a8635 - 0000000 
GlobalRouter DIGITALCERTIFICATE INFO Generate CSR for Digital Certificate successful!